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THERE'S  A  NEW  EXHIBIT  AT  THE  ZOO. 
IT'S  CALLED  ANALYTICS, 


WHAT  ABOUT ' 
COMPANY? 


L  MEASURED  APPROACH 
VITH  REAL-WORLD  RESULTS. 


STARTING  SMALL  WITH 
BUSINESS  ANALYTICS. 
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New  Task  for  CIOs: 
Make  Money 

30  Sure,  all  CIOs  seek  to  add  value, 
but  some  are  developing  systems  that 
customers  are  willing  to  pay  for. 


IT  Plus 


HeadsUp 


Jobless  Rate 
For  Electrical 
Engineers  Soars 


The  lobby  of  Miami  children’s 
Hospital  is  just  one  of  the  places 
users  can  find  with  the  help  of 
the  Fit4KidsCare  app. 


TOP 


BUSINESS  APRS 


TO  GROW  YOUR 
BOTTOM  LINE. 


Applications  to  keep  your  business  moving. 


BlackBerry "  helps  you  give  employees  the  tools 
they  need  to  be  their  best.  We  provide  a  complete 
business  and  productivity  app  portfolio,  robust 
app  management  and  a  low-cost  app  development 
environment.  And  with  BlackBerry*'  Enterprise 
Service  10,  you  can  manage  your  own  corporate 
app  storefront  to  install  mandatory  apps  and  publish 
recommended  apps  to  both  personally  owned  and 
corporate  devices. 

Get  the  full  story  and  a  free  60-day 
BlackBerry  Enterprise  Service  10 
trial*  at  blackberry.com/business 


BlackBerry 

Keep  Moving 


Cisco  WebEx 


Cisco  WebEx 


Starter 

AppsThat 

Kit 

Inspire 

Trending  Apps  &  Games 
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HELPING  CUSTOMERS  UNLEASH  THE 


BUT  DEPLOYING  NEW  CLOUD  SERVICES 
JUST  GOT  EASIER. 

Brocade"  VCS"  Fabric  technology  allows  you  to  treat  an  entire  cluster  of 
switches  as  one,  speeding  configuration  and  automatically  scaling  yoiii 
network  as  tiusiness  requires.  Helping  your  customers  iiierri  ttie  (lemaiiils 
of  an  always  on  worlrl  is  youi  iiiission.  Making  netwoiks  easii'i  to  (lr|iloy. 
Inaii.igis  anil  scale  is  oiiis  I  ef ,  vvoik  tog.etliei  brocade. com/easy 


desktop  UI:  and  a  touch-first  strategy. 

■DC  analyst  David  Daoud  listed  other 
factors,  including  the  saturation  of  the  PC 
market,  especially  in  developed  countries 
like  the  U.S.,  the  fact  that  PCs  bought 


Microsoft  Faces  a 
Loss  of  Relevance 

The  company  is  struggling  to  maintain  its  place 
in  tech  in  the  face  of  a  badly  received  Windows 
uMirade,  faltering  mobile  efforts  and  the  spread 
of  BYOD  in  its  corporate  base.  By  Gr^  Keizer 


”  ICROSOFT  TOOK  another  hard  knock  this  month 
when  top  tech  researchers  laid  much  of  the  blame 
for  dwindling  first-quarter  PC  sales  on  the  belea¬ 
guered  Windows  8  operating  system. 


hurt  by  a  shift  to  tablets  and  smartphones 
and  is  threatened,  even  in  its  enterprise 
stronghold,  by  new  demands  from  busi¬ 
ness  usere  —  especially  those  who  are 
spearheading  the  bring-your-own-device 
(BYOD)  movement,  said  Gartner  analyst 
Carolina  Milanesi. 

Unless  Microsoft  can  turn  around  its  faltering  mobile 
strategy,  it  risks  losing  its  prominent  standing  in  an 
industry  it  has  dominated  for  decades,  she  said. 

“They  need  to  win  the  consumer  battle,"  Milanesi 
said.  “To  remain  relevant,  to  remain  an  influencer,  [Mi¬ 
crosoft  needs]  consumers  to  seek  out  its  products.” 

Even  if  it  loses  relevance,  Microsoft  will  remain  a 
major  company  for  years,  to  come  because  of  its  place  in 
the  enterprise,  noted  Frank  Gillett,  an  analyst  at  For¬ 
rester.  “Because  of  ftie  huge  installed  base  of  Windows, 
aixi  sales  that  will  continue  to  grow  gradually,  Microsoft 
1  will  remain  relevant  in  the  enterprise,"  he  said. 

But  even  there,  Microsoft  faces  Ug  challenges. 

For  instance,  many  corporate  and  government 
•  • .  •  workers  are  flexing  their  muscles  by  bringing  in  their 

own  devices,  which  in  many  cases  aren’t  powered  by 
Microsoft  operating  systems.  “They'll  still  be  the  dominant  oper¬ 
ating  system,  but  they’ll  have  to  deal  with  BYOD,"  Milanesi  said. 

Analysts  did  note  that  Microsoft  is  making  some  encourag¬ 
ing  moves,  most  notably  its  work  on  “Blue,"  the  code  name  for 


er  shipments,  from  both  both  a  reft-esh  of  Windows  this  year  and  fw  a  multiyear  initiative 


When  change  is  the  only  constant, 

IBM  System  x3650  M4  Express  server  delivers. 

Business-critical  solutions  require  a  server  capable  of  delivering  steady  performance  even 
under  pressure.  The  powerful  and  customizable  IBM*  System  x3650  M4  Express*  server, 
with  the  latest  Intel®  Xeon®  processor,  has  a  resilient  architecture  that  is  designed  to 
operate  at  temperatures  as  high  as  40  degrees  Celsius  for  100%  of  operating  hours.'  This 
capability  can  help  save  on  power  and  cooling  costs  and  is  not  warranted  for  either  HP 
ProLiant  DL380p  G8  or  Dell  PowerEdge  R720.^  With  the  added  expertise  of  IBM  Business 
Partners,  you  can  address  the  increasing  demands  on  your  IT  infrastructure. 

A  resilient  server  for  your  business-critical  solutions. 
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NEWS  ANALYSIS 


.  An  explosion  erupts  as  runners  approach 
the  finish  line  of  the  Boston  Marathon, 
^■mThis  photo  by  Dan  lampariello.  who 
was  tweeting  from  the  site. 


Tech  Aids  Boston 
Bombing  Probe 

Social  media  kept  communication  flowing  during 
the  disaster,  and  smartphone  photos  and  videos 
were  seen  as  critical  to  solving  the  crime. 

By  Matt  Hamblen  and  Zach  Miners 


sioner  Ed  Davis  a  day  after  the  bombing. 

FBI  special  agent  Richaid  Des- 
Lauriers.  who  leads  the  investigation. 


checking  in  for  flights  at  Boston's  Logan 
International  Airport  if  they  had  perti- 

"They  were  asking,  'Was  anybody  there 
who  had  any  images?' "  said  Will  Stofega, 
an  IDC  analyst  who  was  at  the  airport  and 
was  asked  about  images  by  investigators. 

Jack  Gold,  an  analyst  at  J.Gold  As- 


While  there  ate  software  tools  galore 
to  help  with  facial  recognition  and 
pattern  recognition,  “it  still  comes  down  to  having 
human  eyes  sort  through  sources  of  interest,"  Cold  said. 
"Despite  our  strides  in  video  analysis  and  image  process¬ 
ing,  at  the  end  of  the  day,  the  systems  we  have  in  place 
are  still  childish  in  their  abilities  compared  to  humans." 


reacted  quickly  after  explosions  ripped  throu^ 
ctowtis  near  the  finish  line  of  the  B^on  Marathon 
last  week,  sending  out  updates  and  snappit^  photos 
and  recortling  videos  that  officials  said  would  be  "cri 


.  tool  for  pubbc  authorities  like  the  Boston  police  and 

marathon  organizers,  but  many  people  also  used  it  to 
spread  reports  that  were  questionable  or  just  plain  inaccurate. 

Social  media  "cuts  both  ways,”  noted  Greg  Sterling,  an  analyst 
at  Opus  Research.  “It  allows  you  to  get  the  information  out  more 
quickly,  but  it  can  also  fan  hysteria." 

The  Boston  Mice  Department's  Twitter  log  showed  the  posi¬ 
tive  side  of  social  media.  It  was  updated  minute  by  minute  in  the 
aftermath  of  the  bombings,  often  with  instructions  to  avoid  certain 
areas,  or  with  information  about  where  police  officers  mi^t  be 
statkmed.  It  was  also  a  source  of  information  on  Friday  as  police 

warned  residents  in  Boston  and  surround- 
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OUR  VISIONARY  CLOUD 
INFRASTRUCTURE  HELPS 
YOUR  BUSINESS  SHINE. 

With  CenturyLink  as  your  trusted  technology  partner,  your  business  can  shine  every  day.  We  are  a 
visionary  cloud  provider  and  leader  in  hosted  IT  solutions,  with  data  centers  around  the  world.  We  also 
provide  you  with  a  global  broadband  network.  And  our  dedicated,  responsive  support  is  designed  to  free 
you  to  focus  on  innovation  and  growth. 


Data  •  Voice  •  Cloud  •  Managed  Services  CenturyLink’ 

Business 
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Laura 

Pettit  Rusick 

This  ClO-for-hire 
gets  inside  dozens 
of  IT  groups,  and  sees 
a  lot  in  common. 

Favorite  tech  toy:  ‘It’s  very 
utilitarian,  but  my  smartphone, 
which  is  a  Droid  Razr  Maxx. 

I  can’t  live  without  it." 
why  tweet? ‘I  use  it  as 
an  outgoing  communications  tool. 

I  don’t  tweet  very  often,  but  I  tweet 
out  articles  that  I  think  would  be 
interesting  to  my  followers." 

If  you  weren’t  in  IT, 
what  wouM  you  be?  ‘An  architect. 
From  the  time  I  was  a  little  kid 
I  was  drawing  floor  plans.” 
what’s  your  next  career  step? 
Continue  to  grow  the  company  and 
open  additional  offices. 


AS  PRESIDENT  of  OPT  Solutions,  a  provider  of  IT  management  services.  Laura 
Pettit  Rusick  has  spent  the  past  seven  years  working  as  an  interim  “retained” 
CIO.  leading  IT  departments  at  multiple  small  ond  midsize  companies,  mostly  on 
a  part-time  basis.  The  experience  has  given  her  new  insight  into  the  technology 
challenges  and  opportunities  that  exist  in  a  wide  swath  of  U.S.  businesses.  Rusiefc.  a  member 
of  the  Society  for  Information  Management  who  had  worked  in  full-time  IT  management 
positions  in  larger  organizations  before  becoming  an  outsourced  CIO,  says  her  current  work 
has  shaped  her  perspective  on  what  it  takes  to  be  an  effective  executive. 


Hobbles:  Golfing  and  showing 
my  dog.  a  Belgian  Tervuren. 
at  American  Kennel  Club  dog  shows. 


What  art  the  greatest  chaliMfH  you  fact  as  a  rtUined  CIO?  One  is  certainly  balanc¬ 
ing  tiine.  We’re  typically  not  on-site  eight  hours  a  day.  We’re  flexing  our  time  throughout 
the  week.  With  multiple  clients,  often  the  peaks  of  work  will  balance  themselves  out, 
which  is  nice.  But  there  are  times  when  scheduling  can  get  pretty  interesting.  1  find  if 
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Key  Code:  z258v 
Visit  www3pc.com/pronx> 
or  call  888-289-APCC  x6532 

Three  ways  to  prevent  human  error  in  IT  spaces! 

>  Get  our  best  practices  FREE  today  and 
enter  to  win  a  Google  Nexus  10  tablet! 


APC 


BUSINESS  REPLY  MAIL  I 

IRST-CLASS  MAIL  PERMIT  NO.  36  WEST  KINGSTON.  Rl  | 
POSTAGE  WILL  BE  PAID  BY  ADDRESSEE 


AHENTION  CRC:  z258v 
132  FAIRGROUNDS  RD 
P.O.  BOX  278 

WEST  KINGSTON  Rl  02892-9920 


Easy-to-deploy  IT  physical  infrastructure 

Solution  guides  make  it  easy  to  determine  what  you  need  to  solve  today's  challenges. 
The  core  of  our  system,  vendor-neutral  enclosures  and  rack  PDUs.  makes  deployment 
Incredtily  headache-free.  Easily  adjusfable  components,  integrated  baying  brackets, 
pre-installed  leveling  feet,  and  cable  management  ac 
. tst  installation. 


Business-wise,  Future-driven" 


Infra^^uk 


Integrated  InfraStruxure "  solutions  include 
everything  for  your  IT  physical  infrastructure 
deploynierit:  backup  power  and  power 
distribution,  cooling,  endosures.  and 
management  software.  Adaptable  solutions 
scale  from  the  smallest  IT  spaces  up  to 
multi-megawatt  data  centers. 


Make  the  most  of  your  IT  space! 

Download  our  Top  3  solution  design  guides  today 
■  and  enter  to  win  a  Google  Nexus  10  tablet! 

B'"  Visit  WWW  Jipccom/promo  Key  Code  z2SSv  Call  888-289-2722  x6532 


THE  GRILL  |  LAURA  PETTIT  RUSICK 


there’s  a  crisis,  clients  will  understand.  The  other  piece 
is  not  having  as  much  face  time. 


Dmi  Mi«  w  hMftai  or  oMfMKtd  CM  giw  1M 
some  advantofes  ever  a  fun-time  exec?  From  a  CEO’s 
perspective,  it  really  does  give  advanuges.  It  would  be 
cost-prohibitive  for  a  lot  of  midsize  companies  to  hire 
a  fulkime  experienced  CIO.  And  you  have  the  experi- 


for  example,  you  could  have  a  software  selection  going 
on  in  one  organization  and  two  months  later  have  the 
same  thing  somewhere  else.  ’That  cross-pollinalion  is 
very  helpful  to  the  client.  And  bringing  in  best  practices 
regardless  of  industry  is  important  as  well.  ’The  other 
piece  of  it  I've  found  is  that  1  have  a  rtiuch  better  network 
than  I  ever  had  as  a  full-time  CIO.  So  Fm  able  to  bring 
people  to  the  table.  I’ve  had  CEOs  ask  for  certain  kinds 
of  people  because  they  know  I  have  those  resources. 


that  being  frank  while  beit^  empathetic  is  a  big  part  of 
the  equation.  People  want  you  to  be  honest  but  because 
they’ve  been  livir^  with  a  bad  situation  for  a  while  they 
also  don’t  want  to  be  criticized  for  it  It’s  about  how 
we  move  forward.  The  other  piece  is  a  pure  business 
piece.  As  soon  as  you  can  show  or  discuss  early  benefits 
by  identifying  new  benefits  or  talking  about  risks  they 
didn’t  know  existed,  it’s  a  way  to  gain  credibility. 


:h  more  difficult  in  a  reuined  situation  to 


have,  for  example,  regular  lunches  with  the  executive 
team.  But  [companies]  have  full-time  employees  who 
travel  all  the  time,  so  [like  them]  you’re  dealing  with 
conference  calls,  you  have  to  be  responsive  to  emails, 
having  scheduled  face  time  on-site.  That’s  very  helpful. 
You  can  see  the  people  and  hear  their  experiences  and 
the  side  conversations  that  ate  helpful  to  understand¬ 
ing  what’s  going  on  and  making  sure  things  aren’t 
going  sideways.  And  some  of  it  is  typical  relationship 

stuff  —  using  humor  where  appropriate,  watching 
yourself  under  stress  because  people  really  look  to  you 
to  see  how  they  should  react. 


orcuizations.  What  are  the  biggest  ttdinology  chal- 
lenges  they  have  in  common?  I’ve  found,  particularly 
after  the  past  recession,  that  investments  got  delayed  so 
they’re  d^ing  with  outdated  software,  infrastructure, 
servers  and  networks  that  have  not  been  updated  in 
some  time.  So  you  have  some  basic  foundation  issues 
that  are  challenges,  and  it  makes  it  really  difficult  then  to 
work  on  the  pn^ects  that  make  them  more  nimble  as  a 
company  to  serve  their  customers  better.  Another  thing 
that’s  common  is  that  companies  are  relying  on  IT  staff 
who  aren’t  serving  the  company  well.  Their  roles  have 
been  expanded  beyond  their  capabilities,  their  respon¬ 
sibilities  don’t  mesh  with  the  company’s  culture,  they’re 
not  customer-service-oriented,  but  [the  companies  are] 
afraid  to  make  changes.  It’s  really  a  big  issue  out  there. 

DO  you  see  any  common  errors  across  organizations? 

There  is  a  commonaUty  of  people  living  with  software 
beyond  its  useful  life  cycle.  My  favorite  one  is  phone 
systems  out  of  warranty  for  years  and  you  ask  the  busi¬ 
ness:  What  would  happen  if  your  phone  system  went 
down?  They  look  at  you  with  horror.  They  don’t  know 
the  risk  to  the  business  they  have. 


you  work  with  small  and  midsize  companies,  yyhat  will 
they  need  from  technology  to  be  competitive  in  the 
future?  They  have  to  have  a  strong  IT  foundation.  They 
have  to  have  good  basic  applications  and  they  have  to 
have  a  hardware  infrastructure  that  in  general  is  up  to 
date  so  they  can  be  more  nimble.  [When  they  have  that] 
then  you  can  get  into  what  enables  that  specific  business 
to  be  more  competitive.  And  the  other  part  of  it,  and  it’s 
a  constant  quest,  is  the  need  for  better  data  or  the  ability 
to  have  the  dau  in  a  format  that  can  be  analyzed.  That’s 
always  been  a  need,  but  the  need  for  data  is  increasing. 

What  are  thchr  biggest  ohstadts  ill  mectliig  those  IT 
goals?  There  are  so  many  things  people  want  to  do,  but 
you  can’t  tackle  it  all  at  once.  So  it’s  having  a  longer- 
term  vision  and  finding  all  the  pieces  first,  all  the 
project  work  that  needs  to  get  done  to  fulfill  that,  while 
at  the  same  time  being  able  to  adjust  course  because 
nothing  is  stagnant.  And  having  patience. 

—  Interview  1^  Computerworld  contributing  writer 
Mary  K.  Pratt  (>n<ir)llipratt@verizon.neO 
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Th«  uMbil*  tachnology  to  tom  bright  idoas  into  succassful  projacts.  The  innovators  at  Verizon  have  created 
enterprise-ready  solutions  for  today's  collaborative  workforce.  Using  the  security  and  speed  of  the  Verizon 
4G  LTE  network,  along  with  the  latest  devices  and  video  conferencing  apps,  these  solutions  help  create  a 
workplace  where  ideas  move  freely  among  groups.  The  result  is  an  environment  ready  for  inspiration  to  strike. 

Because  the  world's  biggest  challenges  deserve  even  bigger  solutions. 

Solutions  for  Mobility:  verizon.com/mobileworkforce 


k  OPINION 

MRT  PERKINS _ 


The  Seeds  of 
Self-Destruction 


Setf-itestnictingf^T 
messages  I 


HIS  MESSAGE  WILL  SELF-DESTRUCT  IN  10  SECONDS.” 

That  variation  on  the  old  Mission:  Impossible  trope  is  now  the 
business  model  for  several  companies.  But  the  services  they  offer, 
while  beneficial  to  their  users,  pose  problems  for  organizations 


maybeaboon 
for  individual 
piiv^,but 
th^willbiii^ 
headaches to 
enterprises. 


■artMrkimis 

managing  panner 
al  Louisville.  Ky.- 
based  Leverage 
Partners,  which  helps 
organizations  invest 
well  in  IT.  Contact 
him  at  BartPerkins@ 
LeveragePartners.com. 


that  need  to  leuin  records,  monitor  employee 
activities  or  keep  an  eye  on  communications  —  in 
other  words,  most  organizations. 

Snapchat,  Wickr,  Bum  Note  and  others  attempt 
to  make  electronic  communications  as  private  as 
face-to-face  discussions.  Snapchat  allows  users 
to  send  silly  or  embarrassing  photos  that  self- 
destruct  within  to  seconds  after  being  opened, 
and  it  notifies  the  sender  if  the  receiver  attempts 
to  capture  the  image  by  screenshot.  Wickr  uses 
"military-grade”  encryption  to  send  selMestruct- 
ing  voice,  text  or  audio  files,  and  it  allows  wndets 
to  control  who  can  access  the  message  and  for 
how  long.  Bum  Note  maintains  all  messages  in 
memory  with  no  disk  backup.  When  opened, 
messages  are  deleted,  along  with  all  sender  and 
receiver  information.  All  of  these  services  are  a  big 
advancement  for  individual  privacy. 

But  that  benefit  can  be  at  odds  with  the  needs 
of  the  enterprise.  Consider  the  following  head¬ 
aches  that  can  ensue  when  your  employees  use 
these  new  technologies: 

Kcamls  retmtion  ni(litiiiar«.  Retention  poli¬ 
cies  typically  require  archiving  all  electronic  and 
paper  messages  for  a  period  of  time  that  is  usually 
specified  in  years.  These  policies  even  cover  trivial 
messages,  such  as  invitations  to  lutKh  or  birthday 
greetings.  Obviously,  messages  that  self-destmct 
can’t  be  retained.  And  any  message  that  can  only 
be  read  by  the  designated  receiver  can’t  be  moved 
into  a  standardized  archive. 

Retention,  of  course,  can  be  a  matter  of  law. 

’The  federal  Freedom  of  Information  Act  requites 
strict  adherence  to  retention  guidelines.  Many 


states  and  foreign  countries  have  similar  laws. 
Self-destructing  messages  would  make  total  com¬ 
pliance  difiicult  or  even  impossible. 

Inability  to  prove  guilt  or  innocence.  Organiza¬ 
tions  have  an  obligation  (fiduciary,  if  not  statuto¬ 
ry)  to  be  on  the  lookout  for  insider  trading,  sexual 
harassment,  corporate  espionage  and  other  nefari¬ 
ous  activities.  When  such  activities  ate  carried 
out  using  self-destracting  messages,  the  electronic 
trail  is  obliterated,  and  punishing  the  guilty 
becomes  difficult.  Moreover,  the  use  of  self-de- 
stmeting  files  to  transmit  inappropriate  thoughts 
or  images  can  open  an  organization  to  charges 
that  it  failed  to  adequately  supervise  its  employees. 

DifliciiKv  makhii  a  business  can.  Most 
organizations  will  find  it  hard  to  justify  policies 
permitting  the  use  of  self-destructing  messages. 
True,  this  type  of  technology  could  provide  a  safe 
way  for  people  to  transmit  sensitive  information 
in  totalitarian  countries.  But  it  introduces  a  lot 
of  risk  in  a  run-of-the-mill  business  operation, 
because  self-destructing  messages  make  it  possible 
to  surreptitiously  setuf  confidential  corporate  data 
to  competitors,  customers,  outsourcers,  stock 
traders  or  the  press. 

Batming  technology  is  rarely  the  best  approach, 
but  if  self-destructing  messages  ate  not  necessary 
for  your  enterprise’s  operations,  keep  them  out. 
Update  corporate  policies,  publicize  your  position 
and  use  device  management  software  to  prohibit 
such  apps  from  the  enterprise  network. 

They  significantly  increase  the  risk  that  bad 
things  will  happen.  And  the  scariest  part  is  that 
you  will  never  even  know.  • 
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Sam  Lamonica,  CIO  at  $750  million  Rosen- 
din  Electric,  has  taken  to  luring  experienced 
engineers  and  operations  people  in  the  field  to 
work  in  IT.  Lamonica  also  admits  to  “stealing 
shamelessly”  from  Rosendin’s  competitors. 

It's  not  that  San  |ose-based  Rosendin 
doesn’t  already  have  a  fabulously  talented  and 
experienced  IT  staff,  Lamonica  says. 

“We  have  a  number  of  really  smart  analysts 
on  our  business  applications  team  who  ate 
mathematics  majors  as  well  [as  technologists]. 

The  challenge  is  they’re  fairly  clueless  about 
what  goes  on  at  a  job  site  on  a  given  day,”  he 
says.  And  Rosendin  typically  is  working  more 
than  i,;oo  multimilliomdollar  jobs  simultane¬ 
ously  in  any  given  month. 

Candid  CIOs  from  healthcare,  financial 
services  and  manuffurturing  all  tell  a  similar 
story.  Fast-changing  business  processes,  the 
need  for  speed,  consumers’  insatiable  appetite 
for  customization  and  the  need  to  comply 
with  a  growing  list  of  government  regulations 
and  industry  sundards  are  all  working  to 
complicate  day-to-day  operations  beyond  the 
roost  business-sawy  technologist’s  ability  to 
keep  pace.  Now  what  is  critically  necessary 

are  not  only  technical  skills  and  business 

knowledge,  but  also  deep  industry  expertise, 
the  kind  that  comes  from  calculating  a  quote  and  selling  an  in¬ 
surance  policy  or  calibrating  and  administering  intravenous  pain 
medication  to  a  cancer  patient,  fitr  example. 

Think  of  it  as  IT-plus. 

“At  the  end  of  the  day,  you  need  a  person  who  gpts  it  all,”  says 
Continuum  CIO  Mark  Moroses. 

Healthcare  reform  and  the  hyper-accelerated  pace  of  change 
are  two  of  the  biggest  factors  driving  the  need  for  IT-plus  creden¬ 
tials  at  Continuum,  says  Moroses. 

“The  healthcare  industry  is  highly  regulated,”  and  adher¬ 
ence  to  those  regulations  is  what  makes  or  breaks  the  bottom 
line,  he  says.  Under  state  and  federal  regulations.  Continuum,  a 


partnership  of  New  York’s  Beth  Israel  Medical 
Center,  St.  Luke’s  Hospital  and  Roosevelt  Hos¬ 
pital,  reports  to  ii  regulatory  agencies.  On  top 
of  that,  there  ate  the  hundreds  and  hundreds 
of  regulations  and  reporting  requirements 
imposed  by  insurance  companies. 

“Getting  technical  people  to  undersund  teg-' 
uladons  is  tough  because  it’s  a  field  they’re  not 
interested  in,”  says  Laurie  Anne  Buckenberger, 

porate  IT  and  a  nurse  practitioner.  Clinicians, 
on  the  other  hand,  live  and  breathe  healthcare 
regulations  from  the  time  they  enter  the  field. 

To  teuin  certification,  hospitals  ate 
requited  to  follow  and  regularly  report  on 
157  different  quality  measures.  “On  your  first 
job  as  a  staff  nurse,  you’re  taught  about  the 
requirements  of  the  Joint  Commission  on 
Accreditation  of  Healthcare  Organizations,” 
Buckenberger  says.  “It’s  also  embedded  in  you 
from  the  time  you  start  [nursing]  school.” 

That’s  why  “you  can’t  do  it  without  clinical 
people,"  says  Moroses.  It’s  also  why  a  clinical 
degree  is  a  requirement  for  memhers  of  the 
applications  support  team  at  Continuum. 

The  need  to  work  quickly  is  another  key 
fector  driving  the  clitiical  requirement,  which 
Moroses  says  evolved  over  time. 

“Before,  programmers  and  analysts  were  separate.  Then  we  took 
the  IT  person  and  put  them  in  the  business  unit  and  called  them  a 
business  analyst.”  Moroses  says.  “But  at  the  end  of  the  day,  you  need 
one  person  who  gets  it  and  does  it.  In  healthcare,  you  need  that 
clinical  component  and  technical  component.  You  have  to  elimr- 
nate  the  translation  requirement  because  of  the  speed  of  business." 

Consequently,  Continuum  has  broadened  the  teach  of  its  IT  te- 
cruitit^  efforts.  Company  representatives  now  visit  nursii^  schools 
to  try  to  persuade  students  to  consider  careers  in  IT  (see  story  below). 

A  nurse  with  firsthand  clinical  experience  would,  for  example,  be 
uniquely  qualified  to  explain  why  a  smaller,  lighter  tablet  would  be 
better  than  a  laptop  lor  a  home  healthcare  provider,  says  Moroses. 


My  managers 
are  better 
businessmen  than 
technologists. 

MICHAEL  FERGANG, 

CIO.  GRANGE  INSURANCE 
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At  the  end  of  the  day, 
you  need  a  person  who  gets  it  all. 

MARK  MOROSES,  CIO.  CONTINUUM  HEALTH  PARTNERS 


“In  order  to  help  the  industry  transform  at  this  quick  pace,  you 
need  this  clinical  part  in  IT,"  he  says.  “The  [companies  that)  can 
transform  the  quickest  [will  have  a]  competitive  advantage." 

“It’s  hard  for  a  pure  IT  person  to  understand  what  emergency 
departments  and  other  clinicians  need,”  he  adds.  “Yes,  they  need 
mobihty,  but  not  just  mobility.  They  need  mobility  in  certain  ways.” 

IT-plus  credentials  can  give  IT  staffers  instant  credibility  in 
the  eyes  of  users,  says  Moroses. 

"If  we’re  having  a  conversation  about  a  system  upgrade  or 
bringing  in  new  functionality,  you  need  a  nurse  or  physician 
talking  to  a  nurse  or  physician,"  says  Moroses. 

Before  Continuum  started  bringing  clinical  people  into  IT, 
“there  was  always  skepticism  that  IT  didn't  really  understand 
what  we  do,"  says  Moroses.  “The  radiology  group  would  have 
their  own  shadow  IT  department  because  they  didn’t  trust 
anyone  [in  ITj  to  get  the  way  things  needed  to  be  configured.” 

Now,  in  contrast,  someone  from  IT  “walks  in  with  a  clinical 
degree  and  there  is  a  built-in  credibility  for  talking  to  people  in 
the  clinical  community.” 

At  Grange,  Fergang  characterizes  IT  professionals  with  deep 
technical  knowledge  plus  insurance  industry  experience  as  “foun- 


“We  have  skunk  works  where  IT 
people  get  together  and  come  up 
with  business  solutions.  We  prototype 
these  for  presidents  of  divisions,  but 
there’s  no  business  involvement.  You 
couldn’t  do  this  without  IT-plus  busi¬ 
ness  knowledge,”  he  says. 

In  one  of  these  projects,  ITbuiltapro- 
totype  that  let  Grai^  sales  agents  repre¬ 
sent  various  policy  alternatives  in  a  single 
quote  system.  Agents  could  char^  key 
parameters  such  as  deductible  amounts, 
driver  type  and  risk  levels  so  customers 
could  customize  their  own  policies. 

"Knowing  our  business,  we  could 
take  a  single  quote  and  represent  it  in 
different  ways,”  Fergang  explains. 

In  another  project,  IT  created  a 
series  of  transaction-driven  alerts  for 
agents.  The  alerts  notify  agents  about 
events  that  affect  their  customers 
and/or  their  sales  performances.  For 
examine,  an  agent  might  be  immedi¬ 
ately  alerted  if  a  customer  called  the 
insurance  carrier,  rather  than  the 
agent,  to  make  a  change  to  his  policy. 

“We  created  the  first  six  alerts 
knowing  what  the  business  rveeded,” 
Fergang  notes.  Since  then,  there  have 
been  more  than  two  dozen  ideas 
for  additional  alerts. 

“If  you  understand  the  business  and 
the  business  strategy,  I  really  do  believe 
IT  is  in  a  unique  position  in  that  it  can 
bring  business  solutions  to  the  bosiness 
that  the  business  can’t  even  imagine," 
Fergang  says.  But  you  have  to  have 
the  right  business  aptitude,  he  adds.  “My  managers  are  better 
businessmen  than  technologists,”  he  says. 

Valuable  Time  in  the  Field 

In  the  increasingly  complex  construction  business,  Rosendin's 
Lamonica  says  etgineers  and  others  frtxn  the  field  are  much  better 
qualified  than  IT  specialists  when  it  cmrtes  to  buildup  and  sup¬ 
porting  software  applications  and  other  automated  tools  used  on 
job  sites.  They  krrow  about  workSows,  contractor  scheduling  artd 
overall  construction  project  management,  he  says. 

This  expertise  is  becoming  even  more  important  as  the  indus¬ 
try  moves  more  toward  the  time-sensitive  practice  of  installing 
prefabricated  assemblies  rather  than  building  on-site. 

“Prefabrications  save  a  ton  on  time  and  rttoney,  and  the  project 
manager  has  to  know  when  they  have  to  go  [on-site],”  Lamonica 
explains.  Most  construction  sites  are  space-constrained  and 
don’t  have  a  lot  of  extra  room  to  store  an  inventory  of  prefabricat¬ 
ed  modules.  Instead,  prefabricated  components  for  big  projects, 
like  a  zo-floor  hospital  buildittg,  are  ordered,  built  off-site  then 
shipped  to  the  project  site  on  a  jirst-in-time  basis.  “We  in  IT 
wouldn’t  have  a  clue  how  that  works,”  he  notes. 
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68%  lower  TCO.* 
An  investment 
worth  making. 


HP  BladeSysteiii  pays  you  back  in  just 
over  7  months.* 

The  data  center  used  to  be  a  cost  center.  Not  anymore.  HP  ProLiant  - 
Gen8  server  blades  solve  the  problem  of  costs  and  complexity  with 
built-in  intelligence,  integrated  efficiencies,  and  ultrahigh  availability — 
all  in  a  blade  that  delivers  TCO  that  gets  better  and  better  every  day. 

The  power  of  HP  Converged  Infrastructure  is  here. 


Join  us  in 
the  Inner  Circle. 

The  Computerworld  Inner  Circle  Research  Panel  was  established  as  a  way 
for  members  of  the  IT  community  to  share  information  and  gain  insight  into 
various  technology  topics,  including  new  initiatives  and  top  issues  faced  by 
IT  professionals  and  executives. 

Inner  Circle  panel  members  get  exclusive  access  to  results  of  the  surveys 
on  the  panel  site  at:  www.computerworldinnercircle.com,  and  are  eligible  for- 
some  nice  cash  and  prize  giveaways  for  their  participation.  We  look  forward  to 
hearing  your  inputi 

Join  for  Free! 

To  register  as  a  panel  member,  visit  www.computeinworld.com/haic 
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VMware  virtualization 
has  saved  businesses 
billions  of  dollars. 

Here’s  how  we’re 
going  to  save  them 
billions  more. 

The 

Software-Defined 
Data  Center. 


entire  data  centers.  So  servers,  storage, 
networking  and  security  can  deliver  even 
greater  levels  of  automation,  efficiency  and 
agility.  VMware  vCloud'  Suite  5.1  delivers 
the  software-defined  data  center,  now.  It’s 
the  data  center  for  the  new  cloud  era. 

vmware 
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situation,"  says  Casey  Coleman,  CIO  for  the  General  Services 
Administration. 

As  the  first  federal  government  agency  to  deploy  a  cloud-based 
email  service  agency-wide,  the  GSA  didn't  have  a  toad  map  to 
follow,  she  says.  So  in  May  2009,  it  launched  an  effort  to  thoroughly 
examine  its  current  costs  and  the  projected  costs  of  the  cloud  service. 

"It  is  the  case  that  it  has  to  be  well  thought-out  and  methodi¬ 
cal.  This  is  an  IT  project  like  any  other.  You  have  to  plan  for 
change  management,  promote  user  awareness,  ensure  cybersecu¬ 
rity  in  contractual  terms,  like  with  any  IT  project.  If  you  don't  ap¬ 
proach  it  in  that  manner,  you  might  have  a  different  experience," 
Coleman  says.  "The  promise  of  cloud  computing  has  b«n  borne 
out  in  our  experience." 

When  the  GSA  adopted  Google  Apps  for  email  in  My  2on,  it 
was  able  to  realize  added  cost  savings  by  also  transitioning  non¬ 
email  systems  that  were  attached  to  its  legacy  email  system.  The 
agency  had  been  using  Lotus  Notes  for  email,  plus  Domino  for 
workflow  apps.  As  part  of  its  review  of  adopting  Apps  for  email, 
the  GSA  took  a  hard  look  at  the  Domino  apps.  "We  ended  up  re¬ 
viewing  those  apps  and  eliminating  most  of  them,"  says  Coleman. 

The  GSA  had  2.000  apps  in  Domino,  ranging  from  small 
databases  to  mote  substantial  workflows.  It  got  rid  of  all  but  500 
of  those,  with  many  consolidated  and  re¬ 
worked.  Cutting  so  many  s^tps  meant  that 
the  GSA  could  then  turn  off  300  in-house 
servers,  Coleman  says. 

Those  cuts  plus  others  enabled  the  GSA 
to  project  that  it  would  save  $16  million 
over  five  years  by  moving  to  Goo^  Apps 
for  email  —  and  to  date  that  estimate  is 
proving  to  be  accurate,  Cdeman  says. 

Not  every  transition  to  the  cloud  will 
save  that  kind  of  money,  but  closely  exam¬ 
ining  costs  and  benefits  may  reveal  that 
the  cloud  makes  sense  even  if  it  doesn't 
impact  the  bottom  line. 

In  2009.  when  Northern  Kentucky 
University  switched  from  an  on-premises 
installatioa  of  Exchange  for  student  email  to 
Microsoft's  hosted  offering,  known  then  as 
Live@edu,  it  didn't  save  money  as  a  resuk  of 
the  change.  But  the  university  gained  value 
because  the  service  allowed  for  easy  integra¬ 
tion  with  smartphones  and  online  storage 
with  Microsoft's  SkyDrive  service.  "Even 
though  the  costs  were  flat,  it  provided  more 
services  to  students,"  says  Tim  Feiguson, 

00  at  the  university. 

Just  Say  NO  -  Even  Temporarily 

Northern  Kentucky  University  is  also  in 
the  midst  of  a  transition  to  using  virtual 
desktops  rather  than  physical  systems  for 
its  computer  labs,  and  it  has  been  turning 
down  vendor  offers  that  just  don't  make 
sense  economically,  hoping  that  stilko- 
come  products  and  pricing  models  will 
eventually  meet  its  needs. 

The  university  decided  to  approach  the 


the  npit  answer  for 
every  situation. 


CASEY  COIEHAN, 


project  in  "baby  steps,”  by  running  the  virtual  desktop  software 
on  premises  with  the  idea  of  transitioning  it  to  a  public  cloud 
later,  says  Ferguson. 

About  18  months  ago,  the  university  did  trials  of  virtual 
desktop  software  from  a  few  vendors,  all  hosted  in-house.  The 
systems  didn't  meet  expectations  in  terms  of  either  price  or 
performance,  so  the  university  declined  to  implement  any  of  the 
vendors'  offerings.  "They  were  surprised.  We  said,  'Here  it  is  in 
black  and  white.  You'll  cost  us  more  money.  The  ROl  is  not  good 
enough.  Come  back  to  me  when  you  can  solve  it,'"  Ferguson  says. 

Since  then,  the  university  has  deployed  VMwate's  View  virtual 
desktop  software  in-house  and  is  about  to  start  trials  running  the 
software  on  Dell's  public  cloud,  and  possibly  others.  Ferguson 
expects  to  have  transitioned  all  of  the  university's  labs  to  virtual 
dektops  hosted  in  a  public  cloud  by  2014  or  2015,  and  he  expects 
that  move  to  cut  costs  by  about  30%. 

The  university  closely  tracks  costs  in  order  to  he  able  to  present 
current  expenditures  to  vendors.  For  the  virtual  desktop  project. 

implementation,  what  the  hardware  costs  and  how  much  work 
is  involved  in  doing  things  like  deploying  patches.  He  also  knows 
when  peaks  and  valleys  in  usage  occur  —  and  that's  important 
information  that  could  help  the  university 
find  savings  in  a  move  to  a  public  cloud. 

The  data  cowes  in  handy  when  working 
with  potential  vendors,  he  says.  "If  I  clearly 
articulate  what  it  costs  today,  if  they  can't 
save  me  money,  why  do  it?”  he  says.  “If  you 
can't  articulate  that,  it’s  kind  of  hard  to  ask 
a  vendor  to  do  something  for  you." 

One  way  that  Northern  Kentucky  is 
making  sure  cloud  services  save  money  is 
by  pushing  its  vendors  to  offer  true  usage- 
ba^  pricing.  Many  SaaS  vendors  that 
Feiguson  has  looked  at  try  to  charge  on  a 
per-seat  basis.  But  that  model  doesn't  make 
sense  for  a  university  that  has  slow  times 
during  the  summer  and  holiday  breaks.  At 
peak  usage,  per-seat  pricing  would  save  the 
university  money,  but  on  average,  because 
of  the  valleys,  that  model  often  ends  up 
costing  more  than  running  apps  in-house. 

TheCakulatioii 

To  try  to  figure  out  the  ROI  of  any  of  its 
prospective  cloud  projects.  Northern  Ken¬ 
tucky  starts  with  an  ROI  calculator  and 
research  from  Gartner,  adapting  it  for  the 
university's  own  special  neMs. 

For  instance,  Ferguson  has  strict 
privacy  requirements  since  many  cloud 
services  used  by  the  university  handle 

including  Social  Security  numbeis.  NKU 
includes  privacy  in  its  ROI  calculation 
by  subtracting  value  when  considering  a 
vendor  that  doesn’t  seem  to  grasp  the  uni¬ 
versity’s  privacy  requirements,  he  says. 
When  calculating  ROI,  the  values  as- 
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pick  the  sources, 
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Sure,  all  CIOs  seek  to  add  value, 
but  some  are  taking  their  quest  outside 
the  walls  of  the  enterprise  by  targeting 
customers  directly. 


of  its  estemal  customers.  It’s  ai 


New  Task  for  CIOs: 


that’s  a  big  enough  job  as  it  is,"  says  Frank 
Scavo,  an  analyst  at  Constellation  Re¬ 
search.  “When  it  comes  to  delivering  smart 
products  to  customers,  it’s  usually  in  the 
product  development  or  marketing  group. 
It’s  unusual  to  see  CIOs  stretch  into  that 
role,  but  QOs  are  looking  at  ways  to  deliver 
more  value  to  the  oiganization." 

Here’s  a  look  at  how  Quinn  and  other  IT 
leaders  got  their  teams  involved  in  revenue- 
generating  endeavors. 

PHI:  Filling  a  Customer  Void 

’IWo  years  ago,  Quirm's  staffers  identi&ed 
a  gap  in  how  the  company’s  clients  tracked 
shipping  and  travel  information.  As  the 
fori^  osvner  of  a  software  development 
comparty,  Quinn  drew  on  his  entrepre- 
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device,  from  tablets  to  desktop  PCs,  says  Quinn. 

The  kiosks  (des^ned  by  PHI  tech  wwl^rs  and 
buik  by  an  outside  vendor)  can  sH  anywhere  a  client 
needs  them,  including  third-party  transportaticxi 
terminals.  PHI  also  offers  a  handheld  d^ce  that 
uses  fingerprint  scans  to  quickly  account  for  and 
track  wori«rs  during  evacuations  of  deep-sea  rigs. 

The  combination  of  software  and  hardware  is  a 
boon  for  PHI  clients  who  were  trackii^  travel  and 
shipping  daU  in  spreadsheets  or  even  on  paper, 

Quinn  says.  Loyal  customers  are  worth  much 
more  over  the  long  term  than  the  nice  but  com¬ 
paratively  small  amounts  of  revenue  the  products  brir^  in,  he  adds. 

“That  was  the  strategy  all  along  —  to  have  a  happier  cus¬ 
tomer,”  Quinn  says.  “We  set  some  goals  of  what  we  wanted  to 
do  and  what  was  going  to  diflFerentiate  us.  We  wanted  to  develop 
something  unique  and  customer-focused.” 

GE:  Driving  Profitabie  Growth 

At  GE  Oil  &  Gas,  CIO  Anup  Sharma’s  IT  shop  built  a  monitcHing 
and  diagnostics  platform  for  the  company's  external  customers. , 


months  to  devebp  a  Web-based  application 
called  iBox  that’s  designed  to  allow  customers  to 
monitor  and  assess  the  health  and  performance 
of  heavy-duty  aeroderivative  gas  turbine  trains 
and  other  equipment,  such  as  compressors, 
generators  and  pumps.  Using  data  that  GE  has 
compiled  over  the  years,  iBox  helps  customers 
enable  quick  startups,  maintain  optimal  operat¬ 
ing  conditions  and  avoid  negative  conditions  like 
turbine  trips.  . 

The  software  is  sold  as  part  ot  a  package  of 
suf^rt  services  offered  by  GE,  Sharma  explains. 
Customers  can  buy  the  turbines  without  buying 
the  services,  and  they  can  buy  the  support  ser¬ 
vices,  including  the  software,  to  monitor  turbines 
made  by  other  companies  as  well. 

Meanwhile,  Jim  Fowler,  CIO  fcff  GE  Power  Gen¬ 
eration  Services,  oversees  the  IT  department  that 
developed  a  Webteed  application  called  M^fieet 
that  gives  its  custmners  —  owners  and  operators  of  thermal  power- 
gen^ting  plants  —  access  to  information  that  helps  them  to  more 
eSkientiy  manage  and  maintain  their  GE  tuitrines.  Fowler  says  his 
team  took  about  four  months  to  deliver  M^leet,  launchii^  the  first 

“It  really  came  from  the  recognition  that  the  data  we  use  to 
run  our  own  business  and  (^rations  could  be  used  to  make  our 
customers  mwe  profitable.  It’s  that  value  that  our  customers 
want,  and  that’s  a  win  for  both  of  us  ”  Fowler  says. 


the  push  to  change  that. 

One  project  that’s  part  of  that  push  invtJws  an  application 
called  Course  Signals.  Developed  by  the  Purdue  IT  team.  Course 
Signals  is  designed  to  monitor  student  behavior  and  academic  per¬ 
formance  to  identify  individuals  who  may  be  at  risk  of  earning  low 
grades.  IT  can  prompt  faculty  members  to  intervene  and  suggest 
actions  they  could  take  to  help  students  improve  their  grades. 


strating  bow  initiatives  that  initially  draw  attention  to  the  quality 
of  wmk  done  internally  by  IT  can  generate  revenue,  McCartney 
says.  One  good  rule  of  thumb,  he  says:  “If  internal  people  will  pay 
for  it,  there’s  a  very  hi^  likelihood  others  will,  too.”  • 

Pntt  is  a  Computerworld  contributing  uniter  in  Waltham.  Moss. 

Vbu  con  cunloct  her  or  moryfcpratt@verizon.net. 


Protect  Your 
’I  Property 

S  JT  DEPARTMENTS  (lip  their  toes  into  the 
waters  of  the  commercial  marketplace, 
they  need  to  be  mindful  of  the  twin  needs  to 
protect  their  intellectual  property  and  avoid 
infringing  on  the  intellectual  property  rights 
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A  Little  Security  Housecleaning 


EVER  WANTING  for  risks  and 
I  vulnerabilities  to  address.  These 
re  things  that  can  get  pushed 

L  aside  by  the  emergency  of  the  day, 
budget  constraints  or  the  internal 
politics  of  the  organization.  But  when  the 
time  is  right,  I  push  for  change.  Here  are 
three  things  that  I’m  currently  tackling. 

VPN  configuration  has  always  been 
a  point  of  contention  between  the 
security,  desktop,  and  network  teams. 

Our  current  VPN  client  is  deployed  in 
a  split  tunnelii^  mode.  When 
is  using  the  VPN  client, 
only  resources  on  our 
network  are  forced  to  go 
through  the  encrypted 
VPN  tuiinel.  Everything 


Internet  trafEc  unprotected  and 
inspected.  The  traffic  that  stays  i 
the  tunnel  doesn’t 
state-of-the-art  firewalls  for  URL  i 
filtering  and  is  invisible  to  our  ii 
prevention  tools,  cnir  advanced 


The  CIA  and  the  Cloud 


Get  this:  Ttie  CIA 
sees  the  doud 
as  being  more 
secure  than 
conventional 
IT  systems. 


technology  and  the 
business  of  technology 
since  CP/M-80  was 
cutting-edge  and 
JOObfiswasafast 
Internet  connection  - 

He  can  be  reached  at 
sivn@vnal.coni. 


IF  YOUR  COMPANY  mistrusts  the  security  of  the  cloud,  it  might  want 
to  take  a  look  at  what  The  Company  is  doing. 

“The  Company”  is  a  term  that  insiders  have  long  used  to  refer  to 
the  CIA.  Is  there  any  organization  that  takes  security  more  seriously? 
Perhaps,  but  probably  not  within  the  Fortune  500.  And  yet  the  CIA 
appears  to  be  moving  to  the  cloud. 


Seriously.  According  to  FCW,  a  publication  that 
tracks  the  intersection  of  government  and  tech¬ 
nology,  the  CIA  has  agreed  to  a  cloud  computing 
contract  with  Amazon  that  may  be  worth  up  to 
$600  million  over  lo  years.  Specifically,  Amazon 
Web  Services  will  help  the  intelligetKe  agency 
build  a  private  cloud  infrastructure. 

What?  You  expected  the  CIA  to  put  its  secrets 
on  the  Amazon  ECz?  I  don’t  think  so! 

But  get  this;  One  reason  the  CIA  started 
moving  to  cloud-based  computing  in  2009  was 
that  it  saw  the  cloud  as  being  more  secure  than 
conventional  IT  systems.  Back  then,  Jill  Tummler 
Singer,  who  was  the  CIA’s  deputy  CIO  at  the  time, 
said,  “By  keeping  the  cloud  inside  your  firewalls, 
you  can  focus  your  strongest  intrusion-detection 
and  -prevention  sensors  on  your  perimeter,  thus 
gainir^  significant  advantage  over  the  most 
common  attack  vector  —  the  Internet.” 

While  we  don’t  know  exactly  how  the  CIA  will 
he  using  Amazon’s  services,  it’s  a  safe  bet  that  it 
will  be  creating  its  own  private  clouds.  Butf^ 
hardware  used  for  those  clouds  might  not  be 
hosted  on  the  grounds  of  the  CIA’s  Langley,  Va., 
headquarters.  Instead,  the  agency’s  cloud  hard¬ 
ware  may  well  end  up  hidii^  out  somewhere  in 
Amazon’s  irummoth  U.S.  East  data  center,  located 
in  nearby  Ashbum,  Va.  Why?  Well,  just  like  any 
other  government  agency  or  private  business,  the 
CIA  wants  to  save  money  in  its  IT  budget. 

Now,  rd  have  to  say  that  if  the  CIA  trusts  the 


cloud,  just  about  anyone  can  trust  it  —  provided,  of 
course,  that  you  always  keep  your  eye  on  security 
and  make  sure  you  and  your  vendor  ate  takit^  the 
steps  necessary  to  safeguard  your  data.  As  Michael 
McConnell,  former  director  of  the  National  Secu¬ 
rity  Agency,  said  last  year,  “The  economics  of  the 
cloud  are  so  compelling  they  can’t  be  denied.  [But] 
we  have  to  get  the  security  aspects  tight." 

How  do  you  do  that?  ’The  CIA  isn’t  likely  to  tell 
you,  or  to  leak  its  doud  plans  in  the  next  season  of 
Homeland.  But  there  ate  guidelines  from  groups 
such  as  the  European  Network  and  Information  Se¬ 
curity  Agency  on  how  IT  shops  should  handle  public 
doud  vendors  and  monitor  their  security  measures. 

Don’t  treat  moving  to  the  cloud  as  some  kind 
of  commodity  purchase.  You  ate  always  going  to 
need  to  do  your  homework  to  make  sure  that  yrwr 
doud-based  services  ate  properly  kept  up  to  date 
and  use  best  security  practices. 

As  Mark  Gilmore,  president  and  co-founder  of 
Wired  Integrations,  a  California-based  technol¬ 
ogy  consuhing  firm,  recently  observed,  if  your 
“people  fail  to  meet  security  standards,  such  as 
using  complex  passwords,  and  leave  machines 
running  for  days  on  end,  the  likelihood  of  intru¬ 
sion  is  going  to  increase  and  eventually  resources 
will  be  hacked."  In  short,  security  basics  remain 
the  same,  whether  you  use  cloud-based  systems  or 
have  an  in-house  client/server  setup. 

The  Company  knows  that,  and  so  should 
your  company.  ♦ 
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IT|careers 


working-from-honie  pilot  fish  arrives  at  his  desk  bright  and  early  one  morning  to 
find  his  laptop  displaying  a  dreaded  message:  Operating  system  could  not  be  found. 
-On  the  fifth  restart  anempt.'  fish  says,  "the  system  somehow  takes,  and  I  am.  for 
the  moment,  functional.  I  spend  several  hours  with  the  vendor's  tech  support,  and 
they  conclude  that  I  had  a  major  disk  error.  Good  news:  I  am  under  warranty  for 


of  the  virtual  training  desktop.  “I 
determine  that  a  reboot  will  resolve 

scene.  "As  I  ask  the  users  to  restart, 
a  voice  pipes  up  from  an  adjacent 
cubicle:  'Can  you  come  over  here  and 
show  me  how  to  reboot  without  shut- 


have  a  deadline."  Fish  crosses  his 
fingers  and  makes  his  deadline  -  and 
next  morning  the  laptop  still  hasn't 
crashed.  The  repair  tech  calls  to  con¬ 
firm  his  appointment,  so  the  worst 
is  over,  right?  Not  even  close.  "About 


Pretty  Good  Odds 

This  IT  pilot  fish  has  a  chat  with  a 
member  of  his  company's  change 
team  -  the  techs  who  work  up  server 


y  sending  me  your 
t5harky@computei 


Do  Crashes  Come  in  Threes? 


"if  we  don't  know  about  the  problem, 
how  can  we  ask  them  about  it?" 

The  gamble  paid  off.  and  fish's  team 
refused  to  accept  the  server  into  sup¬ 
port  until  the  problem  was  fixed. 

Well,  No 

An  early-morning  training  session 
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SENIOR  MANAGERS  need  to  act  when  they  realize  that  the  project 
they  are  responsible  for  is  heading  for  disaster.  But  how  do  you 
know  whether  that  action  should  be  applying  a  little  pressure, 
tweaking  the  process,  parachuting  in  your  best  troubleshooter  or 


completely  overhauling  the  project  team? 

When  faced  with  this  dilemma,  most  manag¬ 
ers  lean  toward  minimalist  approaches,  because 
radical  interventions  carry  bigger  risks.  Exces¬ 
sive  interventions  can  impose  urmecessary  costs, 
introduce  new  problems  or  destroy  morale.  Unfor¬ 
tunately,  small  changes  rarely  fix  big  problems. 

The  biggest  problems  crop  up  when  the  group 
develops  a  toxic  culture.  SuA  teams  passively 
refuse  to  implement  new  processes,  push  back 
against  changes  to  deliverables  or  poison  the  good¬ 
will  of  anyone  you  add  to  the  group.  They  have 
caught  a  supetbug,  the  organizational  equivalent 
of  drug-resistant  bacteria.  A  toxic  culture  can't  be 
rooted  out  with  small  modifications  to  processes 
or  personnel.  You  need  to  do  something  big,  like 
canceling  the  project  or  overhauling  the  team. 

Here  ate  five  warning  signs  that  might  indicate 
that  you  have  a  toxic  team: 

Apathy:  Toxic  teams  have  no  sense  of  urgency 
about  anything  They  put  in  no  extra  efibrt  to 
meet  a  deadline,  don’t  become  frustrated  by 
obstacles  and  religiously  stick  to  regular  oSBce 
hours.  The  team’s  members  may  not  be  naturally 
apathetic  people,  but  they  have  come  to  believe 
that  they  are  helpless  to  control  their  own  success. 

AnUpatby:  Toxic  teams  are  animated  by  self- 
righteous  hostility  toward  other  groups  in  the 
organization.  It  can  be  healthy  for  a  team  to  want 
to  prove  how  good  they  ate  (or  even  how  much 
better  they  ate  than  everyone  else)  by  deliverit^ 
spectacular  successes.  You  have  trouble,  though, 
when  that  mutates  into  a  determination  to  show 
how  bad  everyone  else  is  by  treating  them  disre¬ 


spectfully  and  openly  denigrating  their  abilities 

Rigidity:  Toxic  teams  can  be  pervaded  by  a  dog¬ 
matic  belief  that  there  is  one  and  only  one  right 
way  to  do  anything.  For  them,  compromise  is  evil. 
But  technical  work  is  all  about  compromise,  and 
lefusal  to  engage  in  it  is  a  very  bad  sign.  Be  aware, 
though,  that  you  might  mistakenly  see  teamwide 
rigidity  when  actually  it’s  a  case  of  one  difikult 
leader  or  a  sponsor  who  is  asking  for  technical 
impossibilities. 

Repetition:  Everyone  makes  mistakes,  but  toxic 
teams  repeat  the  same  ones  over  and  over.  That 
suggests  that  the  group’s  leaders  ate  either  unable 
to  learn  from  their  mistakes  or  are  incapable  of 
changing  how  the  group  thinks  or  behaves. 

ISOMion:  Toxic  teams  never  come  to  you  pro¬ 
actively  with  information  on  progress,  problems 
.  or  questions.  They  avoid  communicating  with 
sponsors  and  users,  especially  when  they  know 
that  there  are  delivery  issues.  In  the  worst  cases, 
they  actively  avoid  contact  initiated  by  others. 

When  you  see  these  problems,  you  need  to 
make  decisive  changes  that  get  attention,  remove 
obstacles  and  unambiguously  demonstrate  your 
commitment  to  the  behaviors  and  values  the  team 
needs  to  succeed.  You  may  need  to  fire  or  remove 
the  team’s  leaders,  cancel  service  contracts,  reor¬ 
ganize  the  team  structure  or  demand  that  they 
redo  unacceptable  work. 

I  see  risky  and  pervasive  interventions  as  a 
last  resort.  But  when  you  see  teams  with  deep 
dysfunctions  that  virTOally  guarantee  their  failure, 
you  shouldn’t  hesitate  to  take  bold  action.  ♦ 
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